The risk will also then add the following registry value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\"YSUsed_1MD" = "[RANDOM BINARY NUMBER]"

Spyware.MDetect can log all IM traffic from a number of well known IM clients. This security risk does not need to be installed on monitored computers, it just needs to be installed on a machine in the LAN and it will listen to network traffic in promiscuous mode in order to perform logging and blocking actions.